Backport changes in http://plone.org/products/plone-hotfix/releases/CVE-2011-0720/ .

git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@43235 20353a03-c40f-0410-a6d1-a30d3c3de9de

product/PortalTransforms/Transform.py

@@ -183,7 +183,7 @@ class Transform(SimpleItem):
             self._load_transform()
         return self._v_transform.__doc__
 
-    security.declarePublic('get_documentation')
+    security.declarePrivate('convert')
     def convert(self, *args, **kwargs):
         """ return apply the transform and return the result """
         if not hasattr(self, '_v_transform'):

product/PortalTransforms/TransformEngine.py

@@ -76,6 +76,7 @@ class TransformTool(UniqueObject, ActionProviderBase, Folder):
 
     # mimetype oriented conversions (iengine interface)
 
+    security.declarePrivate('unregisterTransform')
     def unregisterTransform(self, name):
         """ unregister a transform
         name is the name of a registered transform
@@ -85,6 +86,7 @@ class TransformTool(UniqueObject, ActionProviderBase, Folder):
             self._delObject(name)
 
 
+    security.declarePrivate('convertTo')
     def convertTo(self, target_mimetype, orig, data=None, object=None,
                   usedby=None, context=None, **kwargs):
         """Convert orig to a given mimetype
@@ -587,6 +589,7 @@ class TransformTool(UniqueObject, ActionProviderBase, Folder):
 
     # mimetype oriented conversions (iengine interface)
 
+    security.declarePrivate('registerTransform')
     def registerTransform(self, transform):
         """register a new transform